Week 7, 2024

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability

  Microsoft · Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office 2019

  EPSS 95%
• Critical 9.8
  CVE-2024-1512 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection

  stylemix · MasterStudy LMS WordPress Plugin – for Online Courses and Education

  EPSS 78%
• Critical 9.8
  CVE-2024-23113 A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7…

  Fortinet · FortiOS · FortiProxy · FortiPAM

  EPSS 62%
• Critical 9.8
  CVE-2024-23759 Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBoo…
  EPSS 48%
• Critical 9.8
  CVE-2024-21410 Microsoft Exchange Server Elevation of Privilege Vulnerability

  Microsoft · Microsoft Exchange Server 2016 Cumulative Update 23 · Microsoft Exchange Server 2019 Cumulative Update 14 · Microsoft Exchange Server 2019 Cumulative Update 13

  EPSS 13%
• Critical 9.8
  CVE-2024-25110 Azure IoT Platform Device SDK Remote Code Execution Vulnerability

  Azure · azure-uamqp-c

  EPSS 7.3%
• Critical 9.6
  CVE-2024-23476 SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability

  SolarWinds · Access Rights Manager

  EPSS 7.1%
• Critical 9.6
  CVE-2024-23479 SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability

  SolarWinds · Access Rights Manager

  EPSS 5.8%
• Critical 9.0
  CVE-2023-40057 SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

  SolarWinds · Access Rights Manager

  EPSS 4.9%
• Critical 9.1
  CVE-2024-20720 Command injection in data collector backup due to insufficient patching of CVE-2023-38208

  Adobe · Adobe Commerce

  EPSS 3.7%
• Critical 9.8
  CVE-2022-23088 802.11 heap buffer overflow

  FreeBSD · FreeBSD

  EPSS 3.6%
• Critical 9.1
  CVE-2024-1374 Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

  GitHub · Enterprise Server

  EPSS 2.6%
• Critical 9.1
  CVE-2024-1355 Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

  GitHub · Enterprise Server

  EPSS 2.4%
• Critical 9.1
  CVE-2024-1378 Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

  GitHub · Enterprise Server

  EPSS 2.3%
• Critical 9.1
  CVE-2024-1372 Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console

  GitHub · Enterprise Server

  EPSS 2.3%

All 75 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.5
  CVE-2023-50387 Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumpti…
  EPSS 100%
• High 8.1
  CVE-2024-21412 Internet Shortcut Files Security Feature Bypass Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 99%
• High 8.3
  CVE-2024-22024 An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways which…

  ivanti · Ivant · ICS · IPS

  EPSS 95%
• Medium 5.8
  CVE-2023-47218 QTS, QuTS hero, QuTScloud

  QNAP Systems · QTS · QuTS hero · QuTScloud

  EPSS 90%
• Medium 5.3
  CVE-2024-25617 Denial of Service in HTTP Header parser in squid proxy

  squid-cache · squid

  EPSS 88%
• High 8.0
  CVE-2024-23478 SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

  SolarWinds · Access Rights Manager

  EPSS 82%
• High 7.5
  CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU…
  EPSS 74%
• High 7.8
  CVE-2024-21338 Windows Kernel Elevation of Privilege Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 62%